fix(security): sanitize user-controlled path in tenant validation logs

[Pomdapis]

Summary

• Adds SanitizeForLog helper in TenantValidationMiddleware that strips CR/LF/tab from untrusted strings before they reach the logger.
• Wraps context.Request.Path.Value at the excluded-path debug log and the tenant-validation-failed warning.
• Also sanitizes tenantId in the two "tenant not found / not active" warnings, since that value originates from header / subdomain / JWT claim.

Fixes CodeQL cs/log-forging (CWE-117) alerts #2 and #3.

Refs POM-175.

Test plan

• dotnet build Compendium.sln -c Release — 0 errors, no new warnings.
• CodeQL rerun on this branch clears alerts fix(security): sanitize user-controlled path in tenant validation logs #2 and fix(security): remove email from adapter logs for GDPR data minimization #3.

[Copilot]

Pull request overview

This PR addresses CodeQL cs/log-forging (CWE-117) findings by sanitizing user-controlled values before they are written to logs in the ASP.NET Core tenant validation middleware.

Changes:

• Added a SanitizeForLog helper to strip certain control characters from untrusted strings before logging.
• Applied sanitization to request path logging and tenant-id-related warning logs in TenantValidationMiddleware.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

validationResult.Error.Message can contain user-controlled tenant identifiers (e.g., mismatch errors include header/subdomain/JWT values) and is currently logged without sanitization. To fully mitigate CWE-117/log-forging here, sanitize the {Error} value as well (or log a stable error code and keep the raw message only for the response).

Suggested change

	validationResult.Error.Message,
	SanitizeForLog(validationResult.Error.Message),

[Copilot]

SanitizeForLog only replaces \r, \n, and \t. Log-injection can also be done with other control/newline characters (e.g., other char.IsControl chars, Unicode line separators, or ANSI escape sequences). Consider normalizing/replacing all control characters (e.g., via char.IsControl/\p{Cc}) so the helper provides a more comprehensive guarantee.

Suggested change

	return value.Replace("\r", "_").Replace("\n", "_").Replace("\t", "_");
	var sanitized = new System.Text.StringBuilder(value.Length);
	foreach (var ch in value)
	{
	sanitized.Append(char.IsControl(ch) || ch == '\u2028' || ch == '\u2029' ? '_' : ch);
	}
	return sanitized.ToString();